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Abstract. Godel's completeness theorem is concerned with provability, while Girard's 
theorem in ludics (as well as full completeness theorems in game semantics) are concerned 
with proofs. Our purpose is to look for a connection between these two disciplines. Follow- 
ing a previous work [3], we consider an extension of the original ludics with contraction and 
universal nondeterminism, which play dual roles, in order to capture a polarized fragment 
of linear logic and thus a constructive variant of classical propositional logic. 

We then prove a completeness theorem for proofs in this extended setting: for any 
behaviour (formula) A and any design (proof attempt) P, either P is a proof of A or 
there is a model M of A x which defeats P. Compared with proofs of full completeness in 
game semantics, ours exhibits a striking similarity with proofs of Godel's completeness, in 
that it explicitly constructs a countermodel essentially using Konig's lemma, proceeds by 
induction on formulas, and implies an analogue of Lowenheim-Skolem theorem. 



Godel's completeness theorem (for first-order classical logic) is one of the most important 
theorems in logic. It is concerned with a duality (in a naive sense) between proofs and 
models: For every proposition A, 



Here P ranges over the set of proofs, M over the class of models, and P h A reads "P is a 
proof of A." One can imagine a debate on a general proposition A, where Player tries to 
justify A by giving a proof and Opponent tries to refute it by giving a countermodel. The 
completeness theorem states that exactly one of them wins. Actually, the theorem gives us 
far more insights than stated. 

Finite proofs vs infinite models: A very crucial point is that proofs are always finite, 
while models can be of arbitrary cardinality. Completeness thus implies compactness and 
Lowenheim-Skolem theorems, leading to constructions of various nonstandard models. 

1998 ACM Subject Classification: F.3.2, F.4.1. 
Key words and phrases: Ludics, Linear Logic, Completeness. 
a Supported by JSPS Postdoctoral Fellowship Program for Foreign Researchers grant 2008803. 
a ' b This work was supported by JSPS KAKENHI 21700041. 



Introduction 



either 3P(P h A) or 3M(M |= -A). 
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Nondeterministic principles: Any proof of Godel's completeness theorem relies on a 
strong nondeterministic principle such as Konig's or Zorn's lemma, in contrast to the 
trivial completeness theorem with respect to the class of boolean algebras. 

Matching of two inductions: Provability is defined by induction on proofs, while truth 
by induction on formulas. The two inductions are somehow ascribed to the essence of 
syntax and semantics, respectively, and the completeness theorem states that they do 
match. 

Unlike the real debate, however, there is no interaction between proofs and models in Godel's 
theorem. A more interactive account of completeness is given by Girard's ludics (\19\ I21|: 
see E] for good expositions). Ludics is a variant of game semantics, which has the 
following prominent features. 

Monism: Proofs and models are not distinguished by their ontological status, but by their 
structural properties. The common objects are called designs. 

Existentialism: Behaviours (semantic types) are built from designs, in contrast to the 
ordinary game semantics (e.g., Hyland-Ong [22]) where one begins with the definition of 
arenas (types) and then proceeds to strategies (proofs). 

Normalization as interaction: Designs (hence proofs and models) interact together via 
normalization. It induces an orthogonality relation between designs in such a way that 
P_LM holds if the normalization of P applied to M converges. A behaviour A is defined 
to be a set of designs which is equivalent to its biorthogonal (A = A -1- ^). 

In this setting, Girard shows a completeness theorem for proofs |21j . which roughly claims 
that any "winning" design in a behaviour is a proof of it. In view of the interactive definition 
of behaviour, it can be rephrased as follows: For every (logical) behaviour A and every 
(proof-like) design P, 

either P \- A or 3M(M \= A ± and M defeats P). 

Here, "M |= A- 1 " means M € A- 1 , and "M defeats P" means P AIM. Hence the right 
disjunct is equivalent to P A -1 — L = A. Namely, P € A if and only if P h A, that 
is a typical full completeness statement. Notice that M \= A -1 no more entails absolute 
unprovability of A (it is rather relativized to each P), and there is a real interaction between 
proofs and models. 

Actually, Girard's original ludics is so limited that it corresponds to a polarized fragment 
of multiplicative additive linear logic, which is too weak to be a stand-alone logical system. 
As a consequence, one does not really observe an opposition between finite proofs and 
infinite models, since one can always assume that the countermodel M is finite (related 
to the finite model property for MALL |23j). Indeed, proving the above completeness is 
easy once internal completeness (a form of completeness which does not refer to any proof 
system [21]) for each logical connective has been established. 

In this paper, we employ a term syntax for designs introduced in [30j . and extend Gi- 
rard's ludics with duplication (contraction) and its dual: universal nondeterminism (see [3] 
and references therein) . Although our term approach disregards some interesting locativity- 
related phenomena (e.g., normalization as merging of orders and different sorts of tensors 
[21]), our calculus is easier to manipulate and closer to the tradition of A, \fi, Xfifi, 7r-calculi 
and other more recent syntaxes for focalized classical logic (e.g., [H]). Our resulting frame- 
work is as strong as a polarized fragment of linear logic with exponentials ([8]; see also [25J), 
which is in turn as strong as a constructive version of classical propositional logic. 
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We then prove the completeness theorem above in this extended setting. Here, universal 
nondeterminism is needed on the model side to well interact with duplicative designs on 
the proof side. This is comparable to the need of "noninnocent" (and sometimes even 
nondeterministic) Opponents to have full completeness with respect to deterministic, but 
nonlinear Player's strategies. Unlike before, we cannot anymore assume the finiteness of 
models, since they are not sufficient to refute infinite proof attempts. As a result, our proof 
is nontrivial, even after the internal completeness theorem has been proved. Indeed, our 
proof exhibits a striking similarity with Schiitte's proof of Gddel's completeness theorem 
|29j . Given a (proof- like) design P which is not a proof of A, we explicitly construct a 
countermodel M in A^ which defeats P, essentially using Konig's lemma. Soundness is 
proved by induction on proofs, while completeness is by induction on types. Thus our 
theorem gives matching of two inductions. Finally, it implies an analogue of Lowenheim- 
Skolem theorem, (and also the finite model property for the linear fragment), which well 
illustrates the opposition between finite proofs and infinite models with arbitrary cardinality. 

In game semantics, one finds a number of similar full completeness results. However, the 
connection with Godel's completeness seems less conspicuous than ours. Typically, innocent 
strategies in Hyland-Ong games most naturally correspond to Bohm trees, which can be 
infinite (cf. [9]). Thus, in contrast to our result, one has to impose finiteness/compactness 
on strategies in an external way, in order to have a correspondence with finite A-terms. 
Although this is also the case in [3], we show that such a finiteness assumption is not 
needed in ludics: infinitary proof attempts are always defeated by infinitary models. 

The paper is organized as follows. In Section Q] we describe the syntax of (untyped) 
designs; in Section[2]we move to a typed setting and introduce behaviours (semantic types). 
In Section [3] we introduce our proof system and prove completeness for proofs. Finally, 
Section H] concludes the paper. 

1. Designs 

1.1. Syntax. In this paper, we employ a process calculus notation for designs, inspired by 
the close relationship between ludics and linear 7r-calculus |17J . Precisely, we extend the 
syntax introduced by the second author [30J adding a (universal) nondeterministic choice 
operator /\. 

Although |30| mainly deals with linear designs, its syntax is designed to deal with 
nonlinear ones without any difficulty. However, in order to obtain completeness, we also 
need to incorporate the dual of nonlinearity, that is universal nondeterminism [3]. It is 
reminiscent of differential linear logic [14], which has nondeterministic sum as the dual 
of contraction; the duality is essential for the separation property [27] (see also [12] for 
separation of Bohm trees). A similar situation also arises in Hyland-Ong game semantics 
|22j . where nonlinear strategies for Player may contain a play in which Opponent behaves 
noninnocently; Opponent's noninnocence is again essential for full completeness. 

Designs are built over a given signature A = (A, ar), where A is a set of names a,b,c, . . . 
and ar : A — > N is a function which assigns to each name a its arity ar(a). Let V be a 
countable set of variables V = {x, y,z, . . .}. 

Over a fixed signature A, a positive action is a with a € A, and a negative action is 
a(x\, . . . ,x n ) where variables distinct and ar(a) = n. We often abbreviate a 

sequence of variables x\, . . . , x n by x. In the sequel, we always assume that an expression 
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of the form a(x) stands for a negative action, i.e., ar(a) = n and x is a sequence consisting 
of n distinct variables. If a is a miliary name we simply write a for the negative action on 
name a. 

Definition 1.1 (Designs). For a fixed signature A, the class of positive designs P,Q,. . . , 
that of predesigns S,T, . . . , and that of negative designs N, M, . . . are coinductively 
defined as follows: 



p 


::= Q 


(divergence), 




I MSi : i £ /} 


(conjunction) 


s 


::= N \a{Ni,...,N n ) 


(predesign), 


N 


::= x 


(variable), 




| £a(aO.Pa 


(abstraction). 



where: 

• ar(a) = n; 

• x = zi, . . . , x n and the formal sum ^ a(x).P a has |A|-many components {a(x).P a } a£ A; 

• A{"^i : i G /} is built from a set {Si : i G J} of predesigns with / an arbitrary index set. 
We denote arbitrary designs by D,E,.... The set of designs, consisting of all positive, 
negative and predesigns, is denoted by T>. Any subterm E of D is equivalently called a 
subdesign of D. 

Notice that designs are coinductively defined objects. In particular, infinitary designs are 
included in our syntax, just as in the original ludics [21J. It is strictly necessary, since we 
want to express both proof attempts and countermodels as designs, both of which tend to 
be infinite. 

Informally, designs may be regarded as infinitary A-terms with named applications, 
named and superimposed abstractions and a universal nondeterministic choice operator f\. 

More specifically, a predesign No\a{N\, . . . , N n ) can be thought of as iterated application 
NqN\ ■ ■ ■ N n = (• • • ((NqN\)N2) ■ ■ ■ N n ) of an n-ary name a G A. In the sequel, we may 
abbreviate No\a(N\, . . . , JV n ) by No\a{N). If a is a miliary name we simply write iVo|a. 

On the other hand, a negative design of the form a(x).P a can be thought of as iter- 
ated abstraction \x.P a = Axi.(Ax2-(- • • (Xx n .P a ) ■ ■ ■)) of an n-ary name a G A. A family 
{a(x).Pa\ a &A of abstractions indexed by A is then superimposed to form a negative de- 
sign ^a(x).P a . Since ^a(x).P a is built from a family indexed by A, there cannot be any 
overlapping of name in the sum. Each a(x).P a is called an (additive) component. 

A predesign is called a cut if it is of the form (^ a(x).P a )\b{Ni, . . . ,N n ). Otherwise, 
it is of the form x\a(Ni, . . . , N n ) and called a head normal form. 

As we shall see in detail in Subsection II. 2[ cuts have substantial computational sig- 
nificance in our setting: in fact a cut (^ a(x).P a )\b(N) can be reduced to another design 
Pb[N/y\. Namely, when the application is of name b, one picks up the component b(y).Pb 
from the family {a(x).P a } a& A- Notice that the arities of y and N always agree. Then, one 
applies a simultaneous "/3-reduction" (Xy.Pb)N — > Pb[N/y\. 

The head variable x in an head normal form x\a{Ni, . . . ,N n ) plays the same role as 
a pointer in a strategy does in Hyland-Ong games and an address (or locus) in Girard's 
ludics. On the other hand, a variable x occurring in a bracket as in No\a(Ni, . . . , Ni-i, x, 
Ni + i, . . . ,N n ) does not correspond to a pointer nor address. Rather, it corresponds to an 
identity axiom (initial sequent) in sequent calculus, and for this reason is called an identity. 
If a negative design ./V simply consists of a variable x, then is itself an identity. 
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The positive design £1 denotes divergence (or partiality) of the computation, in the sense 
we will make more precise in the next subsection. We also use Q to encode partial sums. 
Given a set a = {a(x), b(y), c(z), . . . } of negative actions with distinct names {a, b, c, . . .} C 
A, we write ^ Q a(x).P a to denote the negative design ^ a(x).R a , where R a = P a if a(x) G a, 
and R a = otherwise. We also use an informal notation a(x).P a + b(y).Pb + c(z).P c + ■■■ 
to denote ^2 a a(x).P a . 

So far, the syntax we are describing is essentially the same as the one introduced in 
[30| . A novelty of this paper is the nondeterministic conjunction operator f\, which allows 
us to build a positive design /\{Si : i £ 1} from a set {Si : i £ 1} of predesigns with / an 
arbitrary index set. Each Si is called a conjunct of P. We write >R (daimon) for the empty 
conjunction /\ 0. This design plays an essential role in ludics, since it is used to define the 
concept of orthogonality. Although is usually given as a primitive (see e.g., [2lT [8} [3D] ). 
we have found it convenient and natural to identify (or rather encode) >3& with the empty 
conjunction. As we shall see, its computational meaning exactly corresponds to the usual 
one: marks the termination of a computation. Put in another way, our nondeterministic 
conjunction can be seen as a generalization of the termination mark. 

A design D may contain free and bound variables. An occurrence of subterm a(x).P a 
binds the free variables x in P a . Variables which are not under the scope of the binder 
a(x) are free. We denote by fv(.D) the set of free variables occurring in D. As in A- 
calculus, we would like to identify two designs which are a-equivalent i.e., up to renaming 
of bound variables. But it is more subtle than usual, since we also would like to identify, 
e.g., /\{S, T} with /\{S} whenever S and T are a-equivalent. To enforce these requirements 
simultaneously and hereditarily, we define an equivalence relation by coinduction. 

By renaming we mean a function p : V — > V. We write id for the identity renaming, 
and p[z/x] for the renaming that agrees with p except that p[z/x](x) = z. The set of 
renamings is denoted by TZAf. 

Definition 1.2 (Design equivalence). A binary relation TZ C (T> x TZAf) 2 is called a design 
equivalence if for any D,E,p,r such that (D,p) 7Z (E,t), one of the following holds: 

(1) D = n = E; 

(2) D = /\{Si :ieI},E = /\{Tj : j £ J} and we have: 

(i) for any i £ I there is j G J such that (Si, p) 1Z (Tj, r), 

(ii) for any j € J there is i € / such that (Si, p) 1Z (Tj,r); 

(3) D = No \a(Ni , ... ,N n ), E = M Q \a(M l: ... ,M n ) and (N k ,p) TZ (M k ,r) for every < 
k < n; 

(4) D = x, E = y and p(x) = r(y); 

(5) D = ^a(x a ).P a , E = J2a(Va)-Qa and (P a , p[z a /x a ]) TZ (Q a , p[z a /y a }) for every a £ A 
and some vector z a of fresh variables. 

We say that two designs D and E are equivalent if there is a design equivalence TZ such 
that (D,id) TZ (E,id). See [30] for further details. 

Henceforth we always identify two designs D and E, and write D = E by abuse of 
notation, if they are equivalent in the above sense. The following lemma is a straightforward 
extension of Lemma 2.6 of |30| . It makes it easier to prove equivalence of two designs 
(just as the "bisimulation up-to" technique in concurrency theory makes it easier to prove 
bisimilarity of two processes). 

Lemma 1.3. Let TZ be a binary relation on designs such that if D TZ E then one of the 
following holds: 
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(1) D = Q = E; 

(2) D = /\{Si :ieI},E = f\{Tj : j £ J}, and we have: 

(i) for any i £ I there is j £ J such that Si 1Z Tj, 

(ii) for any j £ J there is i £ I such that Si 7Z Tj ; 

(3) D = N \a(Ni, ...,N n ), E = M \a(M 1 , M n ) and N k K M k for every 0<k <n; 

(4) D = x = E; 

(5) D = £a(:r).P a; E = £a(f).Q a and P a TZ Q a for every a £ A. 

If D 7Z E, then D and E are equivalent. □ 

As a notational convention, a unary conjunction /\{S} is simply written as S. This allows 
us to treat a predesign as a positive design. We also write: 

• S £ P if P is a conjunction and 5 is a conjunct of P; 

• P < Q if either P = $7, or both P and Q are conjunctions and for all S £ Q, S £ P. 

Thus P < Q indicates that P has more conjuncts than Q unless P = Q. We also extend 
the conjunction operator to positive designs and abstractions as follows. 

Definition 1.4 (A operation). 

(1) As for positive designs, we set 

/\{Si : i £ 1} A f\{Sj : j £ J} := /\{S k : k £ I U J}, QAP := fl 

(2) As for abstractions, i.e., negative designs of the form ^2 a(x).P a , observe that since we 
are working up to renaming of bound variables, it is no loss of generality to assume that 
in any pair ^ a(x).P a , a (y)-Qa, one has x = y for every a £ A. We set: 

Za(x).P a AZa(x).Q a := £ a(x).(P a A Q a ). 

Observe the following: 

• The set of positive designs forms a semilattice with respect to < and A. 

• ^ < P < ^ for any positive design P. 

The previous definition can be naturally generalized to arbitrary sets as follows: 
Definition 1.5 (f\ operation). 

(1) Given a set X of positive designs, we define the positive design /\X as follows: 

• If X = 0, we set A X := *. 

• If n £ X, we set /\X:=n. 

• Otherwise, X is a nonempty set of conjunctions and we set: 

A X := /\{S : S £ P for some P £ X}. 

(2) Given a set X of abstractions, we define the abstraction A X as: 

A X := Y, a(aQ- A{^a : £ a(x).P a £ X}. 
In particular, if X = then A X = £ a (£).*. 

Notice that /\{D} = D, as long as D ranges over positive designs or abstractions. 
A design D is said: 

• total, if D ^ Q; 

• closed, if D has no occurrence of free variable; 

• linear (or affine, more precisely), if for any subdesign of the form No\a(Ni, . . . , N n ), the 
sets fv(iVo), . . . , fv(iV n ) are pairwise disjoint; 
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• deterministic, if in any occurrence of subdesign f\{Si : i € /}, / is either empty (i.e., 
we have ^) or a singleton (i.e., we have a predesign). 

• cut-free, if it does not contain a cut as a subdesign; 

• identity-free, if it does not contain an identity as subdesign. 

We remark that the notion of design introduced in [30] exactly corresponds in our 
terminology to that of deterministic design. Furthermore, considering the specific signature 
Q given below, we can also express in our setting Girard's original notion of design: 

Example 1.6 (Girard's syntax). Let us consider the signature Q = ("P/(N), | |) where: 

• Vf(N) consists of finite subsets of N; 

• | | : Vf(N) — > N is the function that maps a finite subset / Cj N to its cardinality 

| J| e N. 

Girard's designs correspond to total, linear, deterministic, cut-free and identity-free designs 
which have a finite number of free variables over the signature Q. See [30J for more details. 

1.2. Normalization. Ludics is an interactive theory. This means that designs, which sub- 
sume both proofs and models, interact together via normalization, and types (behaviours) 
are defined by the induced orthogonality relation (Section [2]). Several ways to normalize 
designs have been considered in the literature: abstract machines [151 101 E], abstract 
merging of orders [211 EB] , and terms reduction [101 EO] • Here we extend the last solution 
[30] . As in untyped A-calculus, normalization is not necessarily terminating, but in our 
setting a new difficulty arises through the presence of the operator f\ . 

We define the normal forms in two steps, first giving a nondeterministic reduction rule 
which finds head normal forms whenever possible, and then expanding it corecursively. 
As usual, let D[N/x] denote the design obtained by the simultaneous and capture- free 
substitution of negative designs N = N\ , . . . , N n for D. 

Definition 1.7 (Reduction relation — *•). Given positive designs P, Q, we write P — Q if 
(%2a(x).P a ) | b(N) G P and Q = F%[N/x\. We denote by — 1+ the transitive closure, and 
by — the reflexive transitive closure of — 

Given two binary relations TZ±,TZ2 on designs, we write TZ\R-2 to denote the relation 
given by their composition i.e., 

D IZ1IZ2 F <^=^ there exists a design E such that D 1Z± E and E IZ2 F. 

For instance, we write P — S if there exists Q such that P — Q and Q 3 S. 

Examples 1.8. We now give examples of reductions and some remarks. 

(1) o(ar).* I a(K) ->> *. 

(2) b(x).<& I a(K) — ^ O (recall that b(x).%f stands for 6(z).* + a(y).0 + c(z).ft H by 

our conventions on partial sums). 

(3) Let P = a(a).* | a(K) A 6(a;).* | a(K). We have P * and P — >• Q. 

(4) For N = a(x).x\a{x) , let us consider P = N \ a(N). We then have an infinite reduction 
sequence 

P P P ■■■ 

since P = N \ a(N) = (a(x).x\a(x)) \ a(N) and the latter design reduces to x\a(x)[N/x] = 
N I a(N) - P. 
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(5) Let P = a(y).(y\b(w) A z\c(M)) \ a(b(t).Q). We have the following reduction: 

P (y\b(w) Az\c(M))[b(t).Q/y] = b[t).Q \ b(w) A z\c(M[b(t).Q/y}). 

We therefore have P-+3 b{t).Q \ b{w) and P-+3 z\c(M[b(t).Q/y]). Since b{t).Q \ b{w) 
is a cut, we have: 

b(t).Q | b(w) A z\c(M[b(t).Q/y]) -± Q[w/t]. 

(6) The special designs and f2 do not reduce to anything (as we will see, they are normal 
forms). 

(7) By its definition, our reduction is not "closed under context" i.e., if P — Q and P (resp. 
Q) occurs as a subdesign of D (resp. E), nothing ensures that D — E. For instance 
a negative design (or an head normal form) having an occurrence of cut as subdesign 
does not reduces to anything. To expand the reduction "under context" we will use 
Definition [Ll 

Notice that any closed positive design P has one of the following forms: ^, O and /\{Si : 
i € /}, where Si are cuts. The conjunction then reduces to another closed positive design. 
Hence any sequence of reductions starting from P either terminates with ^ or Q or it 
diverges. By stipulating that the normal form of P in case of divergence is O, we obtain a 
dichotomy between ^ and f2: the normal form of a closed positive design is either >J< or J7. 
This leads us to the following definition of normal form: 

Definition 1.9 (Normal form). The normal form function [ ] : T> — > T> is defined by 

corecursion as follows: 

[P] = £1 if there is an infinite reduction 

sequence or a reduction sequence 
ending with starting from P; 

= A{ x \a(lNj) ■ P-^*3 x\a(N)} otherwise; 
U2a(x).P a J = £a(x).[P a ]; 

N = x. 

We observe that when P is a closed positive design, we have [P] = *h precisely when all 
reduction sequences from P are finite and terminate with »i<; thus our nondeterminism is 
universal rather than existential. This, however, does not mean that the set {Q : P — ^* Q} 
is finite; even when it is infinite, it may happen that [P] = ^. 
The following facts are easily observed: 

Lemma 1.10. 

(1) IfP^n,P<Q and Q-^ R, then P-+ R. 

(2) P — Q implies [PJ < [Q] . Furthermore, if P is a predesign, then P — Q implies 

m = iQi 

(3) [A XI = A{[-P] : P £ S or an y se t ^ of positive designs. □ 

Notice that the first statement means that the composed relation < — ^ is equivalent to — 1 
as far as total designs are concerned. 

Example 1.11 (Acceptance of finite trees). In [30J, it is illustrated how words and de- 
terministic finite automata are represented by (deterministic) designs in ludics. We may 
extend the idea to trees and finite tree automata in presence of nondeterminism. Rather 
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than describing it in full detail, we will only give an example which illustrates the power of 
nondeterminism to express (topdown) finite tree automata. 

We consider the set of finite trees labelled with a, b which are at most binary branching. 
It is defined by the following grammar: 

t ::= e | a(ti,t 2 ) | b(t 1 ,t 2 ). 

Here, a(ti,t 2 ) represents a tree with the root labelled by a and with two subtrees t±,t 2 . In 
particular, a(e, e) represents a leaf labelled by a. We simply write a in this case. 

Suppose that the signature A contains a unary name 'f*, binary names a, b and a miliary 
name e. We write I for the positive action f. We abbreviate '[(x).x\a(N) by ^a(N), so that 
we have 

(ta(AT)) | l( a (x).P) (a(x).P) \ a{N) P[N/x]. 

Each tree is then represented by a deterministic linear negative design as follows: 

:= te, 
a(h,t 2 )* := ta{tl,t* 2 ), 

b(h,t 2 y ■.= ib(t&%. 

Now consider the positive design Q = Qo[xq] defined by the following equations: 
Qo[x] := x\i{a(x,y).Qi[x]AQ [y] + b(x,y).Q 2 [x] AQ 2 [y]), 
QM := x\i(b(x,y).Q 2 [x] A Q 2 [y]), 
Q 2 [x] := x\l(e.*}. 

This design Q works as an automata accepting all trees of the form a(b, a(b, ■ ■ ■ a(b, &)•••)). 
Indeed, given a(b, a(b,b)), it works nondeterministically as follows: 

Qo[a(b,a(b,b))*] 



Qi[b* 

i 

* 

L 



Qo[a(b,bY 



Qi[b* 

I 

* 

Q2[e* 
I 

* 



Qo[b* 
i 

* 

L 



Hence we conclude [Qo[o(&> a (b,b))*]J = i.e., Q "accepts" the tree a(b,a(b,b)). 



1.3. Associativity. In this subsection, we prove one of the fundamental properties of de- 
signs which we will need later: 

Theorem 1.12 (Associativity). Let D be a design and Ni, . . . ,N n be negative designs. We 
have: 

PWyi, ■ ■ ■ , N n /y n ]j = MMM, . . . , [N n }/y n ]l 

□ 
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Associativity corresponds to a weak form of the Church-Rosser property: the normal 
form is the same even if we do not follow the head reduction strategy. In this paper we are 
not concerned with the full Church-Rosser property, and leave it as an open question. 

The proof consists of several stages and it can be skipped at first reading. 

To prove associativity, first notice that a simultaneous substitution D[Nx/yi, . . . , N n /y n ] 
can be turned into a sequential one of the form D'[N\/ z\] ■ ■ ■ [N n /z n ] by renaming yi, ■ ■ ■ ,y n 
by fresh variables Zi, ■ . ■ , z n as follows: 

D[N x / yi , . . . , N n /y n ] = D[z x / yi , . . . , z n /y n \[Nx/ z x ] ■ ■ ■ [N n /z n \. 

Moreover, we have: 

\D\[ [iVxlM, . . . , \N n \/y n ] = I D[ Zl / yi , . . .,z n /y n ] J[ [iVi]/zi] • • • [ \N n \/z n ]. 

This allows us to work with sequential substitutions rather than simultaneous ones. 

We define a binary relation ^> on designs by: 
• D > E if D = D [N 1 /y 1 ]---[N n /y n ] and E = \D Q \ [{N^/y^ ■ ■ ■ [[AT n ]/y n ] for some 
D , Ni,...,N n such that yi £ fv(JVj-) for 1 < i < j < n. 

Lemma 1.13. Suppose that P = P [N 1 /y 1 ] ■ ■ ■ [N n /y n ] and Q = [PoJM/yi] • • • [{N n j/y n ] 
so that P>Q. When P — P' , two cases can be distinguished. 

(1) If Po — 1 Pi and P' = P\[Ni/yi\ ■ ■ ■ [N n /y n ], then there exists Q' such that Q < Q' and 

(2) Otherwise, there exists Q' such that Q — 1 Q' and P' S> Q' . 
Proof. 

(1) By LemmaH (2), we have [P ] < [Pi] that implies Q < [PJ [[iVi]/yi] • • • [[AT n ]/y n ]. 
Hence by letting Q' = [Pi] [[iVi]/yi] • • • [[iV n ]/y n ], we have Q < Q> and P' » Q' . 

(2) If (1) is not the CELS6, cl cut must be created by substitution of some Nj for a head 
variable of Po. Hence Po must contain a head normal form yj\a(M) as conjunct for 
some 1 < j < n and Nj = o,(x).R a , so that P contains a cut 

yjlaiMjim/yx] ■ ■ ■ [N n /y n ] = Nj^M^/y^ ■ ■ ■ [N n /y n ] 

(the equality due to y { fv(Nj) for 1 < i < j) and P-^ R a [M/x\ [Ni/yx] ■ ■ ■ [N n /y n ] 
= P' . In this case, [Po] contains yj|a([M]) so that Q contains 

yi |a([M])[[iVi]/yi] • • • [\N n \/y n ] = [^]|a([Jl2]>[[^i]/yi] • • • [\N n \/y n ]. 

Since [Nj] = £a(:r).[Pj, we have [P a l[[M]/f][[iVi]M] • • • [{N n \/y n \. Let Q> 

be the latter design. Since the simultaneous substitutions [M/x] and [[M]/x] can be 
made sequential, we have P' ^> Q' ' . □ 

Lemma 1.14. J/P > Q and Q — 1 Q' , then there exists some P' such that P' ^> Q' and 
P-++P'. 

Proof. Suppose that P = P^Nx/m] ■ ■ ■ [N n /y n ], Q = [P ] [[A^iJ/yi] • • • [[N n ]/y n ] and Q-+ 
Q'. Then [P ] must contain yj\a{\M\) for some M and 1 < j < n. Thus, P — ±*B yj\a(M). 
Suppose also Nj = ^a(x).P a so that {Nj] = ^a(x).[P a ]. 
Now the situation is as follows: Q contains 

^([MlMMA/x] • • • [lN n }/y n ] = [iV,]|a([M])[[iVil/yi] • • • [\N n \/y n ], 
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so we have 

lRaMMl/mNi]/vi] ■ ■ ■ [{Nnl/yn) = Q'- 

On the other hand, 

P -^*3 y j \a(M}[N 1 /y l ]---[N n /y n ] 
N j \a(M)[N l /y 1 ]---[N n /y n } 
R a [M/x a ][N 1 /y 1 ]---[N n /y n ] = P', 

which implies P — 1+ P' . Since the simultaneous substitutions [M/x\ and [|M]/x] can be 
made sequential, we have P' 3> Q'. □ 

Lemma 1.15. Suppose that P S> Q. Then [P] = ft if and only if [Q] = ft. 

Proof. 

• For the 'if direction, we distinguish two cases. 

— If there is an infinite reduction sequence from Q, then there is also an infinite sequence 
from P by Lemma ll.141 

— If Q — ft, then there is P' such that P— A * P' and P' » ft. Namely, P' can be written 
as Poim/yi] ■ ■ ■ [N n /y n ] and ft = [P ] [[iVj/yi] • • • [\N n \/y n ]. The latter means that 
[Po] = ft, which implies [P'J = ft. From this and P— A * P', we conclude [P] = 

• For the 'only-if direction, if P — 17, we easily obtain [Q] = ft. Otherwise, there is 
an infinite reduction sequence P = P° — ^ P 1 — P 2 — • • • . Suppose that P = P° = 
Po[AVyi] • • • [Nn/yn] and Q = [P ][[^i]/l/i] ■ ■ ■ [{Nnj/yn}- Our purpose is to build either 
a finite reduction sequence Q — ft or an infinite reduction sequence Q = Q° — Q 1 — i 
Q 2 — • • • . Two cases arise: 

— The reductions take place inside Po and independently of N%, . . . , N n . Namely, there is 
an infinite reduction sequence Po — ^ Pi — P2 — • • • such that P l = Pi[N\/yi] ■ ■ ■ [N n /y n ] 
for every i > 0. Then [Po] = ft, which implies Q = ft. So we have [QJ = ft. 

— Otherwise, there is at most a finite sequence Po — 1 Pi — • • • — P m such that P l = 
Pi[N\/yi\ ■ ■ ■ [N n /y n ] for < i < m and P m contains a head normal form that is 
responsible for the reduction P m — _p m + 1 . By repeatedly applying Lemma 11.131 (1), 
we obtain Q' such that Q < Q' and P m » Q'. Since P m -^ P m+1 , there exists Q 1 
such that Q'— » Q 1 and P m+1 > Q 1 by Lemma OS (2). Hence by Lemma OJj (1), 
we obtain Q = Q°— A Q 1 . 

In the former case, we are already done. In the latter case, we still have an infinite 
reduction sequence p m+1 — ± p m + 2 — &. . . . anc j pm+i q1 jj ence we ma y repeat the 
same argument to prolong the reduction sequence Q° — Q . Hence we eventually obtain 
lQl=ft. " □ 

Lemma 1.16. Suppose that P S> Q. 

• If P — x\a{M\, . . . , M m ), then there exist L\, . . . , L m such that Q — x\a(Li, . . . , L m ) 
and Mi » L\, . . . , M m » L m . 

• Conversely, if Q — x\a(Li, . . . ,L m ) , then there exist M\, . . . ,M m such that P — x *3 
x\a(Mi, . . .,M m ) and Mi > L x , M m > L m . 

Proof. Suppose that P-^* P 3 z|o(Mi, . . . , M m ). By Lemmas flTT3l and [TTffl (1) (which 
states that the composed relation < — Ms identical with — *■), there is Q' such that Q — Q' 
and P' Q' . Since P' 3 x\a(M), we may write 

x\a(M) = x\a{K)[Nx/y{\ ■ ■ ■ [N n /y n ] = x\n{lt[Nx/y x ] ■ ■ ■ [N n /y n ]) 
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for some K = K\, . . . , K m , where x {yi, . . . , y n }, and Q' contains 

[x|a(i?)][[iV 1 ]/y 1 ] • • • [lN n ]/y n ) = x\a(lKj[{N 1 }/y 1 } ■ ■ ■ [\N n \/y n ]). 

Hence by letting = [i^JfJiViJ/yi] • • • [[Ay/y n ] we obtain Mj » Lj for every 1 < i < m. 
Since Q — Q' 3 x\a(L), namely Q — x\a(L), the claim holds. 

Conversely, suppose that Q — >•* Q' 3 x\a(L\, . . . , L m ). By Lemma fl. 141 there is P' such 
that P — v * P' and P' S> Q'. The rest is similar to the above. □ 

Lemma 1.17. If M N , then either M = y = N for a variable y, or M = ^2a{x a ).P a , 
N = ^2 a(x a ).Q a and P a » Q a for every a € A. 

Proof. Immediate. □ 

The following lemma completes the proof of Theorem 11.121 
Lemma 1.18. If Dq » E , then {D j = {E j. 
Proof. Define a binary relation 1Z on designs as follows: 

• For positive (resp. negative) designs D,E, we have D 1Z E if D = {DqJ, E = [Po]> and 
Do ^ Eq for some Do and Po- 

• For predesigns S, T, we have S 1Z T if S = x|a([Mi], . . . , [M m ]), T = x|o([Li], . . . , 
[L m ]), and Mi 3> Lj for every 1 < i < m. 

We now verify that this 1Z satisfies the conditions of Lemma 11.31 

First, let P, Q be positive designs such that P 7Z Q, i.e., P = [Po], Q = {Qo}, and 
Po 3> Qo for some Po and Qo- 

• If [P ] = n, then [Qo] = ft too by LemmaEEl Hence (1) h olds. 

• If [Po] is a conjunction, then [Qo] is not f2 by Lemma Pi. 151 so is a conjunction. If [Po] 
contains x|a([Mi], . . . , [M m ]), then P — A *9 x\a(M). Since Po » Qo, Lemma [Ll"6l yields 
Qo — x *3 x\a(L) for some L = L\, . . . , L m . Namely, [Qo] contains x|a([L]). Moreover, 
we have Mi S> Li for every 1 < i < m. Similarly, one can show that if [Qo] contains 
x|a([L]), then [Po] contains x|a([M]) and Mi 3> Lj for every 1 < i < m. Hence (2) 
holds. 

Let S,T be predesigns such that S 1Z T, i.e., 5 = x|a([Mi], . . . , [M m ]), T = x|a([Li], . . . , 
[L m ]), and Mj ^> Li for every 1 < i < m. It immediately follows that \Mj\ 7Z [Lj] for 
every 1 < i < m. Also, xlZ x. Hence (3) holds. 

Finally, let N,M be negative designs such that N = [iV ], M = [M ], and N > M 
for some Nq and Mq. 

• If N = x, then N = M = M = x. Hence (4) holds. 

• Otherwise, N must be of the form ^ a(x a ).[P a ] and Nq = ]P a(x a ).P a . Since Nq » Mq, 
Mq is of the form Yl a (x a ).Q a and P a ^> Q a for every a £ A by Lemma 11.171 So 
M = {Mq} = £a(x a ).[Q a ] and [P a ] K [QJ. Hence (5) holds. 

Therefore, if P> » E , we have [Z> ] = [Eq] by Lemma O □ 
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2. Behaviours 



This section is concerned with the type structure of ludics. We describe orthogonality and 
behaviours in 12. 1\ logical connectives in 12.21 and finally explain (the failure of) internal 
completeness of logical connectives in 12.31 

2.1. Orthogonality. In the rest of this paper, we mainly restrict ourselves to a special 
subclass of designs: we only consider designs which are total, cut-free, and identity-free. 
Generalizing the terminology in [30], we call them standard designs. In other words: 

Definition 2.1 (Standard design). A design D is said standard if it satisfies the following 
two conditions: 

(i) Cut-freeness and identity-freeness: D can be coinductively generated by the following 
restricted version of the grammar given in Definition ll.il 



(ii) Totality: D^O. 

The totality condition is due to the original work [21] . It has a pleasant consequence that 
behaviours (see below) are never empty. We also remark that the lack of identities can be 
somehow compensated by considering their infinitary rj expansions, called faxes in [ST]. In 
our setting, the infinitary n expansion of an identity x is expressed by the negative standard 
design rj{x) defined by the equation: 



We refer to [30J for more details. 

We are now ready to define orthogonality and behaviours. 

Definition 2.2 (Orthogonality). A positive design P is said atomic if it is standard and 
fv(P) C {xq} for a certain fixed variable xoJ3 

A negative design N is said atomic if it is standard and fv(iV) = 0. 

Two atomic designs P, N of opposite polarities are said orthogonal and written PLN 
(or equivalently N±P) when [P[7V/x ]]] = ^. 

If X is a set of atomic designs of the same polarity, then its orthogonal set, denoted 
by X- 1 , is defined by X^ := {E : V-D E X, D±E}. 

The meaning of f\ and the associated partial order < can be clarified in terms of orthogonal- 
ity. For atomic designs D, E of the same polarity, define D < E if and only if {D}^ C {E}^. 
D -<E means that E has more chances of convergence than D when interacting with other 
atomic designs. The following is easy to observe. 

Proposition 2.3. 

(1) ■< is a preorder. 

(2) P < Q implies P -< Q for any pair of atomic positive designs P, Q . 

(3) Let X and Y be sets of atomic designs of the same polarity. Then X C Y implies 



P 

S 
N 



n | MS,, -.iei} 

x\a{Ni, . . . ,N n ), 



. . . ,y n ).x\a(ri(yi), . . . ,ri(y n )). 



AY^ AX. 



□ 



The variable xo here plays the same role as the empty address "{)" does in [21] : xo may be thought of 
as a fixed and predetermined "location." 
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In particular, ft ■< P ^ %f for any atomic positive design P0 This justifies our identifi- 
cation of ^ with the empty conjunction f\ 0. 

Remark 2.4. Designs in |21j satisfy the separation property: for any designs D,E of the 
same polarity, we have D = E if and only if {-D} -1 " = {E}^. But when the constraint of 
linearity is removed, this property no more holds, as observed in [26] (see also |10|). 

In our setting, separation does not hold, even when D and E are deterministic (atomic) 
designs. For instance, consider the following two designs [26J: 

p ■= * |;(t(y)-*>, 

Q ■= x Q \i(t(y).P) = x \l{t(y).xo\l(t(y)-*))- 
It is easy to see that in our setting PJ-N holds if and only if TV has an additive component of 
the form t( z )- f\{ z \i{Mi) : i £ 1} for arbitrary index set / and arbitrary standard negative 
designs Mj with fv(Mj) C {z}. 

The same holds for Q, as can be observed from the following reduction sequence (for 
readability, we only consider the case in which N has a component of the form f (z).z\\.{M), 
the general case easily follows): 

Q[N/x ] = N | l(t(y).P[N/x ]) 

- (t(y).P[N/x ]) | i(M[[(y).P[N/x ]/z]) 
->> P[N/x ] ->■* *. 

(If N does not have a component of the form discussed above, we have Q[N/xq] — fi.) 
We therefore conclude {P} ± = {Q} L , even though P ^ Q. 

Although possible, we do not define orthogonality for nonatomic designs. Accordingly, we 
only consider atomic behaviours which consist of atomic designs. 

Definition 2.5 (Behaviour). A behaviour X is a set of atomic standard designs of the 
same polarity such that X^ -1- = X. 

A behaviour is positive or negative according to the polarity of its designs. We denote 
positive behaviours by P, Q, R, . . . and negative behaviours by N, M, K . . . . 
Orthogonality satisfies the following standard properties: 

Proposition 2.6. Let X, Y be sets of atomic designs of the same polarity. We have: 

(1) X C X x± . 

(2) X C Y => Y 1 - C X- 1 . 

(3) X C Y ±J - X ±A - C Y ±± . 

(4) X -1 - = X^ -1 -^. In particular, any orthogonal set is a behaviour. 

(5) (XUY) 1 = X 1 flY i . In particular, the intersection of two behaviours is a behaviour. □ 



Here we are tentatively considering the nontotal design Q, which does not officially belong to the 
universe of atomic designs. 
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We also observe that D <E and DgX implies E G X when X is a behaviour. 
Among all positive (resp. negative) behaviours, there exist the least and the greatest 
behaviours with respect to set inclusion: 

+ := j^}- 1 - 1 - = {►&}, T~ := (0 + ) x = { atomic negative designs } , 

:= {^j- 1 - 1 - = {*~}, T + := (0~) ± = { atomic positive designs } , 

where := ^a(x).%< plays the role of the design called negative daimon in [21]. Notice 
that behaviours are always nonempty due to the totality condition: any positive (resp. 
negative) behaviour contains ^ (resp. ^ _ ). 

Now that we have given behaviours, we can define contexts of behaviours and then the 
semantical entailment \= in order to relate designs to contexts of behaviours. These con- 
structs play the role of typing environments in type systems. They correspond to sequents 
of behaviours, in the terminology of [21] . 

Definition 2.7 (Contexts of behaviours and semantical entailment \=). 

(a) A positive context V is of the form x\ : Pi, . . . , x n : P n , where distinct 
variables and Pi, ... , P n are (atomic) positive behaviours. We denote by fv(r) the set 
\x\ , . . . , x n }. 

A negative context T, N is a positive context T enriched with an (atomic) negative 
behaviour N, to which no variable is associated. 

(b) The semantical entailment is the binary relation |= between designs and contexts of 
behaviours of the same polarity defined as follows: 

P \= xi : Pi, . . . , x n : P n if and only if: 

• P is standard; 

• fv(P) ^ { X U • • ■ i x n}', 

• (PiK^xt, . . . , K n /x n ]\ = « for any K x G P^, . . . , K n G P^. 
N \= x\ : Pi, . . . , x n : P n , N if and only if: 

• N is standard; 

• fv(iV) C { Xl , . . . ,x n }; 

. [Q[iV[iri/xi, . . .,K n /x n ]/x ]j = * for any K\ G K n G P^, Q G N^. 

Clearly, N \= N if and only if N G N, and P \= y : P if and only if P[x /y] G P. 
Furthermore, associativity (Theorem II. 12p implies the following quite useful principle: 

Lemma 2.8 (Closure principle). 

(1) P \= T, z : P if and only if \P[M / z]\ (= Y for any M G P^; 

(2) N \= T, N if and only if lQ[N/x ]} (= T for any QgN 1 ; 

(3) N \= T, z : P, N if and only if \N[M / z}} (= T, N for any MeP 1 . 

Proof. 

(1) Let P be a standard design with fv(P) C {x±, . . . , x n , z} and T a context x% : Pi, . . . , x n : 

Pn- 

First, we claim that [P[M/z]] is a standard design when P \= T, z : P and M G P -1- . 
Indeed, it is obviously cut-free. It is also identity-free because so are P, M and neither 
substitution P[M / z] nor normalization [P[M/z]] introduces identities. Totality will be 
shown below. We also note that fv([P[M/z]]) C {xi, . . . ,x n }, since M is an atomic 
negative design that is always closed. 
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Next, we observe that {P[K/x,M/z}} = I {P[M/z]j [K/x]j for any list K = 
K\, . . . ,K n of standard negative designs. Indeed, notice that P[K/x,M/z] = P[M / z][K / x] 
since M is closed, and [.fQ] = Ki since Ki is cut-free. Hence by associativity, we obtain: 

lP[K/x,M/z]] = {P[M/z][K/x]\ = I {P[M/z]\ [{K\/x]\ = [ \P[M/z\\ [K/x]\. 

In particular, {P[K/x,M/z\\ = * implies the totality of [P[M/^]]. 

We are now ready to prove the first claim. Writing K £ Y 1 - for K\ £ P^, . . . , 
K n £ P^-, we have: 

P \= r, z : P {P[K/x, M/z]j = ^ for every K £ r -1 and M E P" 1 , 

^ [ IP[M/z]] = * for every K £T ± and M € P" 1 , 

[P[M/«]] h r for ever y M € p± - 
(2) and (3) are proven in a similar way. We just mention that the crucial equalities 

lQ[N[K/x\/x ]j = UQ[N/x }j[K/x]l 

lQ[N[K/x,M/z]/x ]} = lQ[lN[M/z]j[K/x]/x ]l 

which are needed to show (2) and (3) respectively, can be straightforwardly derived 
from associativity. □ 



2.2. Logical connectives. We next describe how to build behaviours by means of logical 
connectives in ludics. 

Definition 2.9 (Logical connectives). An n-ary logical connective a is a pair a = (z, ao) 
where: 

• z = zi, . . . , z n is a sequence of distinct variables; 

• ao = {ai(xi), . . . , a,k(xk)} is a finite set of negative actions such that: 

— the names a\, . . . , are distinct; 

— {xi} C {zi, . . . , Zn} for each 1 < i < k. 

Two logical connectives are identified if one is obtained from another by renaming of vari- 
ables. 

We can intuitively explain the structure of logical connectives in terms of standard 
connectives of linear logic as follows. 

The variables z\,...,z n play the role of placeholders for (immediate) subformulas, while 
ao determines the logical structure of a. An action a(xi, . . . ,x m ) G ao can be seen as a 
kind of m-ary "tensor product" x\ ® ■ ■ ■ ® x m indexed by the name a. The whole set ao 
can be thought of as fe-ary "additive sum" of its elements: 

k components 

, * V 

••• © {xx ® ■■■ ®x m )® 



In Appendix [X] we give a more precise correspondence between logical connective in 
our sense and connectives of polarized linear logic |25j . 
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Example 2.10. Consider the logical connective a = (x,y, z,t,{a(x,y,t),b(t,x),c(y,x)}). 
By the previous discussion, we can intuitively think of it as 

(x ® y <g) t) (t x) (y®x). 

a be 

When a is applied to N, M, K, L, it gives the formula 

(N <g> M <g) L) (L ® N) (M <g> N) . 

a be 

We now define behaviours built by logical connectives. 

Definition 2.11 (Behaviours defined by logical connectives). Given an m-ary name a, an n- 
ary logical connective a = (z, ckq) with z = Zi, . . . , z n and behaviours Ni, . . . , N n , Pi, ... , P n 
we define: 

• 5<Ni,...,N m ) := {x \a(Ni,...,N m ) : N\ G Ni, . . . , N m £ N m }, 

• Q(Nl,...,N„) := (UafxI^^iK-M^j) , 

• a(P 1 ,...,P n ):=a(Pi,...,P^) ± , 

where the indices i±, . . . , i m G {1, . . . , n} vary for each a(x) G ao and are determined by the 
variables x = %,... , Zj m . We call the set 

a eth (Ni,...,N n ) := |J a(N n ,...,N im ) 

a(x)gao 

the ethics of a(Ni , . . . , N n ) . 

Remark 2.12. An ethics is a set of atomic predesigns which are by construction linear 
in xq. It can be seen as a "generator" of a behaviour defined by logical connectives in the 
following sense. For positives, we have by definition a(Ni, . . . , N n ) = a et h (Ni, . . . , N n )- L - L . 
For negatives, we have by Proposition 12.61 (3): 

a(Pa,...,P„) = aiPi,...^^ 

= "eth(P]S • • • ^n) 111 

= a^Pi,...^^. 



Example 2.13. Let a be the logical connective as given in Example 12.101 and N,M,K,L 
negative behaviours. We have a eth (N, M, K, L) =a(N,M,L) U 6(L,N) U c(M,N). 

Example 2.14 (Linear logic connectives). Logical connectives t, _L, T can be defined 

if the signature A contains a miliary name *, unary names t'j 7r ij 7r 2 an d a binary name p. 
We also give notations to their duals for readability. 





:= (xi,x 2 ,{p(xi,x 2 )}), 


<8) 


:= % 


• := P, 


k 


:= (x 1 ,X2,{tti(x 1 ),tt 2 (x 2 )}), 


© 


:= &, 


Li . — 7Tj , 


t 


■■= Mt(z)}), 


4 


:= t, 


1 := t, 


1 


:= (£,{*}), 


l 


:= -L, 




T 


:= (6,0), 





:= T, 





where e denotes the empty sequence. We do not have exponentials here, because we are 
working in a nonlinear setting so that they are already incorporated into the connectives. 
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With these logical connectives we can build behaviours corresponding to usual linear logic 
types (we use infix notations such as N <8» M rather than the prefix ones <8>(N, M)). 

N®M = • (N,M) ±± , P2?Q = •(P ± ,Q ± } ± , 

N8M = (i X (N) Ui 2 (M)) il , P&Q = L 1 (P ± ) ± ni 2 (Q ± } ± , 

;n = |(N}^, fP = |<p^, 

1 = {zol*}^, ± = {xol*}^ 

= X± , T = X . 



The next theorem illustrates a special feature of behaviours defined by logical connec- 
tives. It also suggests that nonlinearity and universal nondeterminism play dual roles. 

Theorem 2.15. Let P be an arbitrary positive behaviour. 

(1) P \= x 1 : P, x 2 : P P[x /x 1 ,x /x 2 ] G P. 

(2) AXeP 1 X C p- 1 . 

Moreover, z/P is obtained by applying a logical connective, i/ioi is P = a(Ni, . . . , N n ) /or 
some a, Ni, . . . ,N n , then: 

(3) the converse of (1) fduplicabilitvj and 

(4) the converse of (2) ( closure under f\) hold. 

Proof. 

(1) For any N G P^, we have {P[N/xx, N/x 2 ]j = Hence, [P[x /xi, x /x 2 ][iV/xo]] = 
and so P[xo/xi, ^0/^2] € P" 1 "^ = P. 

(2) By Proposition O (3), we have A x ^ Ai N } = N for an Y N G X. Since P^ is a 
behaviour, it is upward closed with respect to ^. Hence the claim holds. 

(4) For the sake of readability, we consider the binary case and show that N, M (= P^ 
implies N A M \= P -1 -. The general case can be proven using the same argument. 

Let P ± = a(Ni,...,N n )- L = a(N i L , . . . , N£). To prove N AM G P ± , by Remark 
12.121 it is sufficient to show that NAM is orthogonal to any xq \a(K) G a e th (Ni , . . . , N n ) . 
Since by construction xo occurs only once at the head position of xo\a(K), we only have 
to show that (N A M \ a{K)J = 

Let N = a(x).P a and M = ^ a(x).Q a so that N A M = £ a(x).(P a A Q a )- Since 
iV A M I a(iT) is a predesign, we have by Lemma ll . 101 (2), (3): 

IN A M I a(K)j = lP a A Q a [K/x]j = {P a [K/x\} A {Q a [K/x}} = {N \ a(K)j A \M \ a(K)j. 

Since N, M G P x , we have {N \ a(K)j = ►& and \M \ a(K)j = Our claim then 
immediately follows. 

(3) Let P[x /xi,x /x 2 ] G P = a(Ni,.. . ,N n ). It suffices to show that \P{N /x±,M /x 2 \\ = 
^ holds for any N,M G P^. But we have just proven that N A M G P -1- , and so 
lP[x /x 1 ,x /x 2 ][N AM/xo]] = [P[JVAM/xi,JVAM/z 2 ]l = *■ Since NAM <N,M 
by Proposition O (3), we have [P[iV/xi, M/x 2 ]] = *. □ 

Remark 2.16. Theorem 12.151 can be considered as an internal, monistic form of sound- 
ness and completeness for the contraction rule: soundness corresponds to point (1) while 
completeness to its converse (3), duplicability. 

However, in the sequel we only use point (1) (in Theorem 13. 5p and point (4) (in Lemma 
EIUD of Theorem [2451 
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2.3. Internal completeness. In [21], Girard proposes a purely monistic, local notion of 
completeness, called internal completeness. It means that we can give a precise and direct 
description to the elements of behaviours (built by logical connectives) without using the 
orthogonality and without referring to any proof system. It is easy to see that negative 
logical connectives enjoy internal completeness: 

Theorem 2.17 (Internal completeness (negative case)). Let a = (z,ao) be a logical con- 
nective with z = z\, . . . ,z n and N = £ a(x).P a an atomic negative design. We have: 

N G a(Pi,...,P n ) P a \= z h : P h ,. . . ,z im : P im , for every a(x) G a , 

where the indices i\,...,i m G {1, . . . , n} are determined by the variables x = Z\ x , . . . , Zi m . 

Proof. Let N = £a(x).P a be an atomic negative design and P = xo\a(Ni, . . . , N m ) G 
a e th(Pi", • • • ,P^> = Ua(5)eo ^ P i'---' P 4)- Since P l N / x o] is a predesign and x occurs 
only at the head position of P, we have by Lemma ll. 101 (2): 

{P[N/x ]j = [£aOz?).P a | a(N x , ...,N m )j = {P^/z^. . .,N m /z t Jj. 

This means that TV" G a e th(Pi") • • • > P^} 1 = «(Pi ; • • • > Pn) (see Remark 1 2.1 2 1) if and only if 
for every a{x) G a and for every iVi G P+, . . . , N m G P^, {P a [Ni/z h ,. . . ,N m /z im ]j = * 
if and only if for every a(x) G ao, P a \= Zj 1 : P^, . . . , Zj m : P« m (see Definition 12.71 (b)). □ 

Notice that in the above, Pi, can be arbitrary when b{y) ^ ao- Thus our approach 
is "immaterial" in that we do not consider material designs (see e.g., \21\ [HI [30] for the 
definition of material design) . The original "material" version of internal completeness [21] 
can be easily derived from our immaterial one. 

Remark 2.18. A remarkable example of internal completeness for negative behaviours is 
provided for the logical connective &: = (xi,X2, {vri(xi), ^2(^2)}): 

iVGP&Q N = TT 1 (x 1 ).P + ir 2 (x 2 ).Q + --- , for some P \= x 1 : P and Q \= x 2 : Q 
N = tti(x ).P + ir 2 (x ).Q H , for some P G P and Q G Q. 

Above, the irrelevant components of the sum are suppressed by "• • • ." Up to materiality 
(i.e., removal of irrelevant additive components), P & Q, which has been defined by inter- 
section, is isomorphic to the cartesian product of P and Q. This isomorphism is called "the 
mystery of incarnation" in [21] . 

As to positive connectives, [21] proves internal completeness theorems for additive and 
multiplicative ones separately in the linear and deterministic setting. They are integrated 
in [30] as follows: 

Theorem 2.19 (Internal completeness (linear, positive case)). When the universe of stan- 
dard designs is restricted to linear and deterministic ones, we have 

5(Ni, . . . , N n ) = 5 eth (Ni, . . . , N n > U {*}. 

□ 
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However, this is no more true with nonlinear designs. A counterexample is given below. 

Example 2.20. Let us consider the behaviour P := 4-(t(0)) = iethxKO))" 11 " and the designs 
P = x \i{t(y)-^) and Q = x \i{-\(y).P) of Remark |2~31 By construction, P belongs to P. 
Since P < Q, Q also belongs to P. However, Q -Uth(t(0))> since \(y).P is not atomic and 
so cannot belong to t(0)- 

This motivates us to directly prove completeness for proofs, rather than deriving it from 
internal completeness as in the original work |21j . 

In [3 J a weaker form of internal completeness is proved, which is enough to derive a 
weaker form of full completeness: all finite "winning" designs are interpretations of proofs. 
While such a finiteness assumption is quite common in game semantics, we will show that 
it can be avoided in ludics. 

We end this section with the following remark. 

Remark 2.21. The main linear logic isomorphism, namely the exponential one \A® IB = 
\(ASz B) can be expressed in our notation as fP ® tQ — 4(P & Q)- 

In our setting it is possible to prove that those behaviours are "morally" isomorphic, 
in the sense that they are isomorphic if we consider designs equal up to materialitjU. 

We can in fact define a pair of maps (f,g) on designs such that: 

• / : tP®tQ — > +(P&Q) and g: |(P & Q) — > tP®tQ; 

• if P and Q are equal up to materiality in fP (g> tQ, then f(P) and f(Q) are equal up to 
materiality in J,(P & Q), and similarly for g; 

• for any P £ jP(g>tQi we have that g(f(P)) and P are equal up to materiality in tP<8>tQ> 
and similarly for the other direction. 

We postpone a detailed study of isomorphisms of types and related issues to a subsequent 
work. 



3. Proof system and completeness for proofs 

Having set up the framework, we now address the main problem: an interactive form of 
Godel completeness. We first introduce the proof system in l3.ll then examine its soundness 
in !3.2l and finally prove completeness in !3.3l in a way quite analogous to the proof of Godel's 
theorem based on proof search (often attributed to Schiitte |29|). 

3.1. Proof system. We will now introduce a proof system. In our system, logical rules are 
automatically generated by logical connectives. Since the names which constitute the logical 
connectives are chosen among the names of a signature A, the set of logical connectives vary 
for each signature A. Thus, our proof system is parameterized by A. 

If one chooses A rich enough, the constant-only fragment of polarized linear logic (|25j; 
see also [8]) can be embedded, as we will show in Appendix [Aj 

In the sequel, we focus on logical behaviours, which are composed by using logical 
connectives only. 

^Informally, two designs D and E are equal up to materiality in a behaviour G if they only differ in 
occurrences of positive subdesign which are irrelevant for the normalization against designs of G x . 
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Definition 3.1 (Logical behaviours). A behaviour is logical if it is inductively built as 
follows (a denotes an arbitrary logical connective): 

P := a(N 1> . . . , N n >, N := a(Pi, . . . , P n ). 

Notice that the orthogonal of a logical behaviour is again logical. 

As advocated in the introduction, our monistic framework renders both proofs and 
models as homogeneous objects: designs. 

Definition 3.2 (Proofs, Models). A proof is a standard design (Definition 12. ip in which 
all the conjunctions are unary. In other words, a proof is a total, deterministic and 5<- 
free design without cuts and identities. A model is a linear standard design (in which 
conjunctions of arbitrary cardinality may occur). 

We will use proofs as proof-terms for syntactic derivations in the proof system to be 
introduced below. In that perspective, it is reasonable to exclude designs with non-unary 
conjunctions from proofs, because they do not have natural counterparts in logical reasoning. 
For instance, the miliary conjunction (daimon) and the binary one would correspond to the 
following "inference rules" respectively: 

hr h-r 

h r hr 

with h r an arbitrary sequent. Notice that we have not specified yet what a proof actually 
proves. Hence it might be better called "proof attempt" or "untyped proof" or "para-proof." 

On the other hand, we restrict models to linear designs just to emphasize the remarkable 
fact that linear designs do suffice for defeating any failed proof attempt that is possibly 
nonlinear. 

Given a design D, let ac + (D) be the set of occurrences of positive actions o in D. 
The cardinality of D is defined to be the cardinality of ac + (-D). For instance, the fax 
r)(x) = X) a (yi) • • • >yn)- x \Q{v(yi)> ■ ■ ■ iViUn)) ( see Section 12. lj) is an infinite design in this 
sense. Also, both proofs and models can be infinite. 

A positive (resp. negative) sequent is a pair of the form P h Y (resp. JVhT, N) where 
P is a positive proof (resp. A is a negative proof) and T is a positive context of logical 
behaviours (Definition O (a)) such that fv(P) C fv(r) (resp. fv(JV) C fv(r)). 

We write D h A for a generic sequent. Intuitively, a sequent D h A should be under- 
stood as a claim that "D is a proof of h A" or U D is of type h A." 

Our proof system consists of two sorts of inference rules: 

• A positive rule (a, a) : 

MihT.Ni, ... M m hr,N tm (z:a(Ni,...,N ra )er) 

z\a(M 1 ,...,M m )hT [a ' a) 
where a = (z, oto), z = Zi,...,z n and a(x) £ ao so that the indices ii, . . . , i m € {1, . . . , n} 
are determined by the variables x = z^, . . . , zi m . 

• A negative rule (a): 

{Pa l~ r, Zjj : Pjj , . . . , Zi m : Pj m }a(x)gao , n 

E«(^)-^a^r,a(Pi,...,p n ) {a) 

where, as in the positive rule, the indices ii,...,i m are determined by the variables 
x = Zi t , . . . , Zi m for each a(x) G «o- 
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We assume that x are fresh, i.e., do not occur in T. This does not cause a loss of 
generality since variables in a can be renamed (see Definition I2.9P . 

Notice that a component of ^ a(x).P a can be arbitrary when b(y) ao- Hence 

we again take an "immaterial" approach (cf. Theorem 12. 17j) . 

Observe that the positive rule (a, a) involves implicit uses of the contraction rule on positive 
behaviours. The weakening rule for positive behaviours is implicit too; in the bottom up 
reading of a proof derivation, unused formulas are always propagated to the premises of any 
instance of rule. It should also be noted that proof search in our system is deterministic. 
In particular, given a positive sequent z\a(M\, . . . , M m ) h T, the head variable z and the 
first positive action a completely determine the next positive rule to be applied bottom-up 
(if there is any) . 

It is also possible to adopt a "material" approach in the proof system by simply requiring 
P\, = £1 when b(y) ao in the rule (a). Then a proof D is finite (i.e., ac + (D) is a finite set) 
whenever D h A is derivable for some A. Thus, as in ordinary sequent calculi, our proof 
system accepts only essentially finite proofs for derivable sequents (i.e., finite up to removal 
of irrelevant parts). 

Remark 3.3. To clarify the last point, we observe that for any (possibly infinite) negative 
proof N with fv(iV) C fv(r), the sequent JV h T,T is derivable by the instance of the 
negative rule with a = T = (e, 0). In fact, this corresponds to the usual top-rule of linear 
logic (see also Example I3.4|) : 

jvhrj ^ 

This means that for a (possibly infinite) negative proof N there is a finite derivation of 
N h r, T. By contrast, in the "material" approach we only have 

5>(f).n hr,T ^ 

where ^ a(x).0, is the unique negative proof which has cardinality 0. 

Example 3.4. For linear logic connectives (Example 12. 14p . the positive and negative rules 
specialize to the following (taking here the "material" approach): 

Mih-r.Ni M 2 hT,N 2 (z : Ni ® N 2 g T) P h V, Xl : Pi, x 2 : P 2 

1 (M 1 ,M 2 )hr i<g) '* j p(x 1 ,x 2 ).Phr,P 1 2?P 2 A 



M 



hT,N, (2:N!$N 2 gr) P 1 hT,x 1 :P 1 P 2 hT,x 2 :P 2 

z\h{m)\-t { vn(xi).Pi + tt 2 (x 2 ).p 2 hr,P!&p 2 & 

iVhr,N (z:|Ner) p^r,x-.p 
z\i(N) h r l4 " ij Ux).p h r, tP T 

(g : 1 ! r ) ri ^ Phr r , v m 

z|*hr l ' J *.Phr,± l ; X]a(^)^ hr 5 T 
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3.2. Soundness. The inference rules given above are all sound. Namely we have: 

Theorem 3.5 (Soundness). If D h A is derivable in the proof system, then D \= A. 

Proof. By induction on the length of the derivation of D h A. We have two cases, one for 
each sort of rule. 

(1) Suppose that the last inference rule is 

Mihr.Nj, ... M m hr,N im (z:a(N 1 ,...,-N n )&T) 

z\a(M 1 ,...,M m )hT [a ' a) 

where T = x\ : Pi, . . . , x\ :P\ and z : a(Ni, . . . , N n ) = Xk : Pk for some 1 < k < I. 

The induction hypothesis gives us Mj \= T, Nj. for every 1 < j < m. By Lemma 12.81 
(3), Mj := [Mj[Ni/xi, Ni/xi\J G N<. for every N% G Pj~, . . . ,Ni G Pf~ and by Defi- 
nition^ we have that x \a{M[, M' m ) G a(Ni, . . . , N n ), that is x \a(M[, M' m ) \= 
x : a(Ni, . . . ,N n ). 

Applying Lemma I2T81 (1), we get xo\a(Mi, . . . , M m ) |= T, xq : a(Ni, . . . , N n ) and by 
Theorem ET5] (1) we conclude 2|a(Mi, . . . , M m ) |= T. 

(2) Suppose now that the last inference rule is 

{Pa I - r, X : Pa}a(x)gao , s 

Eo(^).-Pai-r,a(Pi,...,p n ) 1 ; 

where V = yi : Q 1; ...,yi: Qi and x : P a stands for z ix : P^ , . . . , Zj m : P im . We assume 
that the variables y%, . . . , y\ and x are disjoint in any premise. 

The induction hypothesis gives us P a (= T,x : P a for every a(x) G ckq. By Lemma 
(1), for every N\ G Qf, . . . , iVj G P^ := [P a [JVi/n, . . . , JV,/ar,]] (= x : P a . 

Then, we can apply Theorem 12.171 to obtain ^a,(x).P' a G q(Pi, . . . , P n ), that is 
^2,a{x).P' a \= a(P\, . . . , P n ). Notice that in ^a{x).P' a the components b(y).P{, for 
b(y) ^ «o can be arbitrary. 

We finally apply Lemma [2TH1 (3) and conclude ^ a(x).P a \= T, a(Pi, . . . , P n ). □ 

Although our proof system does not include a cut rule officially, the semantics validates it 
as follows. 

Proposition 3.6. 

(1) IfP (= r,z : P and M (= T,P ± , then \P[M / z}\ \= V. 

(2) J/JV H N,T,z : P and M H r.P- 1 , then {N[M/z]] \= N, T. 

Proof. Let T be x\ : Pi,...,x n : P n , let K\ G Pf", . . . ,K n G P^" and write K/x for 
Ki/xi, . . .,K n /x n . 

(1) By Lemma ESI we have P' := {P[K/x]\ \= z :P and M' := [M[^/x]] |= P x , so that 
P'[x /z] G P and and M' G P x . Hence, [P'[x /^] [M'/x ]} = [P'[M'/z]] = *. From 
this fact and associativity (Theorem II . 12|) . we can derive J[P[M/z]]] [-fT/x]]] = ^, which 
proves [P[M/z]] |= T. 

(2) Let Q be an arbitrary design in N -1 -. By Lemma [2.8l we obtain [QfA/xg]] \=T,z : P and 
Q' = HQ[N/x ]}[K/x}] \= z : P. On the other side, we have M' := {M[K/x\\ \= P ± . 
From Q'[x /z] G P and and M'eP 1 , we obtain IQ' [x / z][M' / x ]j = {Q'[M'/z\\ = *. 
From this fact and associativity, we can derive \Q[ \N[M / z\\[K / x\ /xo]J = *5, which 
proves [JV[Af/z]] IN. P. * " □ 
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Thanks to the previous proposition, we can naturally strengthen our proof system as follows. 
First, we consider sequents of the form D h A where D is a "proof with cuts" (i.e., a proof 
in the sense of Definition [IO] except that the cut-freeness condition is not imposed). Second, 
we add the following cut rule: 

d[n/z]\-s,t M) 

where S is either empty or it consists of a negative logical behaviour N. 
The soundness theorem can be naturally generalized as follows: 

Theorem 3.7 (Soundness (with cut rule)). If D h A is derivable in the proof system with 
the cut rule above, then {DJ \= A. □ 



3.3. Completeness for proofs. Let us finally establish the other direction of Theorem 
13.51 namely: 

Theorem 3.8 (Completeness for proofs). A sequent D h A is derivable in the proof system 
if and only if D \= A. 

In particular, for any positive logical behaviour P and a proof P , P h xo : P is derivable 
if and only if P € P. Similarly for the negative case. □ 

Before proving the theorem, let us recall a well-established method for proving Godel com- 
pleteness based on proof search (often attributed to Schiitte [29|). It proceeds as follows: 

(1) Given an unprovable sequent h T, find an open branch in the cut-free proof search tree. 

(2) From the open branch, build a countermodel M in which h Y is false. 

The proof below follows the same line of argument. We can naturally adapt (1) to our 
setting, since the bottom-up cut-free proof search in our proof system is deterministic in 
the sense that at most one rule applies at each step. Moreover, it never gets stuck at the 
negative sequent, since a negative rule is always applicable bottom-up. Adapting (2) is 
more delicate. 

For simplicity, we assume that the sequent D h A is positive; the argument below can 
be easily adapted to the negative case. So, suppose that a positive sequent P$ h 0o with 
©o 

— x\ : Pi, . . . , x n : P n does not have a derivation. By Konig's Lemma, there exists a 
branch ob in the cut-free proof search tree, 

iVi h 
Pi h ©i 



P o H0 o , 

which is either finite and has the topmost sequent P m ax \~ ©max with max £ N to which 
no rule applies anymore, or infinite. In the latter case, we set max = oo. 
Our goal is to build models M.(x\) € P] 1 , . . . M.{x n ) G P^- such that 

lP [M(x 1 )/x 1 ,...,M(x n )/x n ]j = n. 

More generally, we define negative designs 

• M(i) for every i > (0 < i < max if max £ N); 

• M(x) for every variable x occurring in the branch. 
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Below, a and (3 stand for logical connectives: a = (z, ao), /3 = (u, /3o). 
To define we distinguish three cases: 

(i) When i = max and P m ax = let M.{max) := ^ _ (= Yl a,(x).%<). 

(ii) When i = max and P m ax ^ suppose that P ma x t - ©max is of the form z\c(M) h 
r,z : a(N) but c(t?) ^ oq so that the proof search gets stuck. Then let Ai(max) := 
Yl a (x)ea a (^)-^- Recall that the partial sum A^(max) has c(w).Q as component by our 
convention. 

(hi) For i < max, suppose that the relevant part of the branch ob is of the form: 



p i+1 h e i+1 h giijft : Qi-'--^i : 

ob = JVi h *i = EKy)-^+i I" ©i,N ifc 



Pi h ©i z|o(Mi,...,M fc _i,i;6(i/).Pi + i,M fc+ i,... > M m ) h 0, 



(a, a) 



where @i contains z : a(Ni, . . . , N n ), a(x) € with x = z^ , . . . , Zi m , and Nj fe = /3(Qi, . . . , 
Q s ), 6 /3o with y = yi,... ,yi- Namely, the situation is as follows (to be read bottom- 
up): 

• The head variable of Pj is z, so z : a(Ni, . . . , N„) is chosen from the context 0j and the 
rule (a, a) is applied. Among m upper sequents, the feth one is taken in the branch. 

• Ni = b(y)-Pi+i is negative, and the unique negative behaviour in is Nj fe = /3(Qi, . . . , 
Q s ), so the rule (/3) is applied. Among the upper sequents (recall that there is one sequent 
for each action in /3o), the one corresponding to b(y) £ /3q is taken in the branch. 

In this case, we define 

M(l) := a(x).Z ik \b{M( yi ), . . .,M(yi)) + Ea \{a(x)} C (™)-*- 

Here, the main additive component of begins with a(x).Zi k \b because (1) Pi begins with 
the positive action a, (2) the kih upper sequent is taken in the branch, and (3) the upper 
sequent corresponding to b{y) is taken. The other additive components Y^a \{a(x)} c(w).>^ 
are needed to ensure that our countermodel belongs to the behaviour ce(Ni, . . . , Nn) 1 (see 
Lemma ETD](1)). 

The subdesigns M.(yi), ■ ■ ■ , M.{y{) are given by 

M(y) := A{-M(j) : Pj has head variable y}. 

Notice that each M(j) is a negative design, so the above conjunction is a defined operation 
(in the sense of Definition 11.51 (2)). 

We claim that is well-defined, because variables y are chosen fresh, so do not 

appear freely below Ni h SEV Hence subdesigns M(yi), ■ ■ ■ ,M(yi) do not have Ai(k) with 
k < i as conjunct. Namely, M(i) depends only on M(j) with j > i. This gives rise to a 
recursive procedure and M(i) arises in the limit of the procedure. 

Notice also that the set {M(j) : Pj has head variable y} can be empty and in such a 
case, we have that M(y) = ■ 

Remark 3.9. The above is an instance of corecursive definition. It is possible to formally 
justify it by employing design generators developed in [30J (see in particular Theorem 
2.12 of [30]). An alternative way is to define (and M(y)) as the limit of its finite 

approximations. Here we briefly outline this latter approach. 
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We assume that max = oo. The idea is to chop off the branch ob at height K, where 
K is an arbitrary natural number, and define finite approximations Ai K (i) and M K (y). 
Then A4(i) and AA{y) arise as the limit when K — > oo. 

More concretely, given a natural number K, we define M K {i) by downward induction 
from i = K to i = as follows: 

• When i = K, the sequent Pk l~~ @k is of the form z\a{M) h T,z : a(N). We let 

■M X W:=Ea(f )eao ^)-^ 

• When i < K, we proceed as in the case (iii) above. Namely, 

M K (i) := a(x).z i MM K (y 1 ),...,M K (y l )} + T, ao \ { amc(w).^, 

M K (y) := f\{M K (j) : i < j < K and Pj has head variable y}, 

where actions a{x), 6 and the index i^ are determined as before. 
Now observe that the sequence {A4 K {y)}KeN is "monotone increasing" in the sense that 
A4 lx2 (y) has more conjuncts than Ai Kl (y) whenever K\ < K2. The same for A4 K (i) with 
i < K. Hence we can naturally obtain the "limits" 

M(i) = lim M K (i), M(y) = lim M K (y). 
This construction ends up with the same as the previous recursive one. 

Observe that each and M.(x) thus constructed are surely models, i.e., atomic 

linear designs. Theorem 13.81 is a direct consequence of the following two lemmas. 

The first lemma crucially rests on induction on logical behaviours, that is an analogue 
of induction on formulas, which lies at the core of logical completeness in many cases. 

Lemma 3.10. For Pi h 0j appearing in the branch ob above, suppose that Pi has a head 
variable z and z : R € ©j. Then: 

(1) M(i) 6 R^; 

(2) M(z) € n ± . 

Proof. By induction on the construction of R. 

(1) Suppose that i = max. Since £1 does not have a head variable, the case (i) does not 
apply. Hence we are in the case (ii), namely R = a(Ni, . . . , N n ), for some logical 
connective a and logical behaviours Ni,...,N n . Thus, R^ = a(Nj, . . . , N^-), and 
M(max) := J2 a (x)ea a 0?)-*- 

By internal completeness for negative connectives (Theorem 12. 17p . we have 

a(x).P a G a(N^, . . . , N^) <==^ P a (= x : N^, for every a(x) G a , 

where x = z ix , . . . , Zi m and the expression x : abbreviates the positive context 
Zi x : N^, . . . , Zi m : N^. Since >B \= x : trivially holds for every a(x) G oiq, we have 
M{max) ea(Nj-,...,N^) = R x . 

When i < max, the case (iii) applies. In the same notation, we have that R = 
a(Ni,...,N n ), N ifc =/3(Qi,..., Q s ), and 

M(i) = a(x).z tk \b(M( yi ), . . .,M(yi)) + E ao \{a(x)} 

where actions a{x), h, the index and the variables y\,...,yi are determined by the 
relevant part of the branch ob as described above. 
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By induction hypothesis on (2), we have that M.{yi) G Qi~, . . . , M.{yi) G Qr 1 . Hence, 
x \b(M(y !),..., M(yi)) G P(Qi, . . . , Q^) = N£. Since M(j/i),...,.M(yi) are atomic 
(i.e., closed), we may derive Zi k \b(M(yi ),..., M.(yi)) \= x : N„. We also have ►& |= 
u; : for every c(ttJ) G «o \ { a 0*0}- Hence, by internal completeness again, M.(i) G 
a(N T L ,...,N^) = R ± . 

(2) It follows from (1) since R -1 is a negative logical behaviour and so closed under f\ 
(Theorem EES (4)). □ 

The proof of the next lemma suggests a similarity between the construction of our counter- 
models and the Bohm-out technique (see, e.g., [2]), that constructs a suitable term context 
in order to visit a specific position in the Bohm tree of a given A-term. 

Recall that the initial sequent of our open branch ob is Pq h ©o with @o = x\ : 
Pi, . . . ,x n : P n , so that fv(Po) != {x\, . . . , x n }. We have: 

Lemma 3.11. 

{P [M(x 1 )/x 1 ,...,M(x n )/x n }j = n. 

Proof. We first prove that there is a reduction sequence 

Pi{M{v x )/v u . . .,M(v s )/v s }^* P l+1 [M( Wl )/ Wl , . . .,M(w t )/w t ] 

for any i < max, where v\, . . . ,v s and w±, . . . , Wt are the free variables of Pi and Pi+i, respec- 
tively. Suppose that Pi is as in the case (iii) above, so has the head variable z G {i>i, . . . , v s }. 
By writing [9] for [A4(vi)/vi, . . . , M.(y s )/v s \ and noting that M.(z) is a (defined) conjunc- 
tion that contains M(i) = a(x).z ik \b(M{yi), . . . ,M{yi)) + Yl ao \{a{x)} c{w).>b as conjunct, 
we have: 

Pi[6] = M{z) | a{M 1 [9] , . „ , M k _ x [9] , J2 b(y).P i+1 [9] , M k+1 [9],..., M m [9] ) 

- (EKy)-Pi+i[8}) \b(M( yi ),...,M( yi )) A--- 

— P iJrl [e,M{y 1 )/y 1 ,...,M{y l )/yi], 

as desired. When max = oo, we have obtained an infinite reduction sequence from 
Pq[M{xi)/xi,. . . ,M{xn)/x n ]. Otherwise, P [M(x{)/xi, . . . , M(x n )/x n ]— A * P ma x[9}, for 
some substitution [6]. 

In case (i), we have P ma x = Pmax[9] = ^, while in case (ii), we have P ma x = z\c(M). 

So, 

P m ax[9] = z\c(M}[9] = M(z)\c(M[9})-+ tt, 
because M. (z) contains M.{max) as conjunct, and M.{max) = ^a(z)ea a (^)-^ nas c(w).Q 
as component. □ 

Theorem 13.81 now follows easily. Suppose that Pq h x\ : Pi,...,x n : P n is not 
derivable. Then we obtain models A4(x\) G P^, M{x n ) G P^; by Lemma 13.101 
and {Pq[M(xi)/xi, . . . , A4(x n )/x n ]l = Q by Lemma [3.111 This means that Pq \/= x\ : 

Pi > • • • j 3>n ■ Pn ■ 

Our explicit construction of the countermodels yields a by-product: 

Corollary 3.12 (Downward Lowenheim-Skolem, Finite model property). 

(1) Let P be a proof and P a logical behaviour. If P ^ P , then there is a countable model 
MeP 1 (i.e., ac + (M) is a countable set) such that PJ/M. 

(2) Furthermore, when P is linear, there is a finite and deterministic model M G P -1- such 
that PJ/M. □ 
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The second statement is due to the observation that when P is linear the positive rule (a, a) 
can be replaced with a linear variant: 



M 1 hT 1 ,-N il ... M ra hr mi N lm 



(a, a)iin 



z\a(M 1 ,...,M m )hT,z:a(N 1 ,...,N r , 

where Ti, . . . , T m are disjoint subsets of T. We then immediately see that the proof search 
tree is always finite, and so is the model M.{x). It is deterministic, since each variable 
occurs at most once as head variable in a branch so that all conjunctions are at most unary. 



4. Conclusion and related work 

We have presented a Godel-like completeness theorem for proofs in the framework of ludics, 
aiming at linking completeness theorems for provability with those for proofs. We have 
explicitly constructed a countermodel against any failed proof attempt, following Schiitte's 
idea based on cut-free proof search. Our proof employs Konig's lemma and reveals a 
sharp opposition between finite proofs and infinite models, leading to a clear analogy with 
Lowenhein-Skolem theorem. Our proof also employs an analogue of the Bohm-out technique 
[U [2] (see the proof of Lemma I3.11j) . though it does not lead to the separation property 
(Remark E3|). 

In Hyland-Ong game semantics, Player's innocent strategies most naturally correspond 
to possibly infinite Bdhm trees (see, e.g., [9]). One could of course impose finiteness (or 
compactness) on them to have correspondence with finite proofs. But it would not lead to an 
explicit construction of Opponent's strategies defeating infinite proof attempts. Although 
finiteness is imposed in [3] too, our current work shows that it is not necessary in ludics. 

Our work also highlights the duality: 

proof ^ model 

deterministic, nonlinear nondeterministic, linear 

The principle is that when proofs admit contraction, models have to be nondeterministic 
(whereas they do not have to be nonlinear). 

A similar situation arises in some variants of A-calculus and linear logic, when one 
proves the separation property. 

We mention [12], where the authors add a nondeterministic choice operator and a 
numeral system to the pure A-calculus in order to internally (interactively) discriminate 
two pure A-terms that have different Bdhm trees. However, in contrast to our work, the 
nondeterminism needed for their purpose is of existential nature: a term converges if at 
least one of the possible reduction sequences starting from it terminates. 

In [27], the separation property for differential interaction nets [14] is proven. A key 
point is that the exponential modalities in differential interaction nets are more "symmet- 
rical" than in linear logic. In our setting, the symmetry shows up between nonlinearity 
and nondeterministic conjunctions (i.e., nonuniform elements). It is typically found in 
Theorem 12.151 which reveals a tight connection between duplicability of positive logical 
behaviours and closure under nondeterministic conjunctions of negative logical behaviours. 
Similar nonuniform structures naturally arise in various semantical models based on coher- 
ence spaces and games, such as finiteness spaces [13], indexed linear logic and nonuniform 
coherence spaces [6], nonuniform hypercoherences [5], and asynchronous games [28] (see 
also [3]). 
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For future work, we plan to extend our setting by enriching the proof system with 
propositional variables, second order quantifiers and nonlogical axioms. By moving to the 
second order setting, we hope to give an interactive account to GddePs incompleteness 
theorems as well. 
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Appendix A. Correspondence with polarized linear logic 

In this appendix, we show a correspondence between the proof system for ludics introduced 
in 13.11 and the constant-only propositional fragment of polarized linear logic LLP |25j . 
This will ensure that our proof system is rich enough to capture a constructive variant of 
constant-only propositional classical logic. 

A.l. Syntax of LLP. We recall the syntax of the constant-only propositional fragment of 
LLP. The formulas are split into positive and negative ones and generated by the following 
grammar: 

P ::= | 1 | POP I P©P | !N, 
N ::= T | _L ! N^N j N&N j ?P. 

The linear negation is defined in the usual way. A sequent is of the form h V with V a 

multiset of formulas. The inference rules of LLP are given below: 

h r hr,p hA,Q 

hr ' T hl nr,i h-r,A,p®Q 

h-r,Pi h-r,N,M h-r,N h-r,M kaa,n 



h-r,Pi©p 2 r-r,N^M h-r,N&M \-N,m 

h r,p h r h r, n, n h-r,N ha.n 1 

h-r,?p hr,N ht,n FTTa 

where: 

• in the T-rule above V contains at most one positive formula; 

• Af denotes a context consisting of negative formulas only. 

In [21] it is proven that if h T is provable in LLP, then V contains at most one positive 
formula. Notice that it is strictly opposite to the ludics discipline [ST]; in the latter, any 
sequent contains at most one negative behaviour. To resolve this mismatch, we modify LLP 
in several steps, making it closer to the ludics discipline. 

Precisely, in Section IA.2I we introduce the concept of strict sequent which leads us to 
the formulation of syntectic connectives in LLP (Section IA.3j) . In Section [A.41 we give an 
embedding of LLP with synthetic connectives into the proof system of ludics we gave in 
Section 1331 Finally, in Section lA.5l we give a converse embedding of the ludics proof system 
into LLP. 
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A. 2. Restriction to strict derivations. We call a sequent of LLP strict if it is of the 

form h ?T, D, where D is an arbitrary formula. In particular, h ?T is strict. We modify the 
inference rules as follows: 

• Structural rules are made implicit by absorbing weakening and contraction into logical 
inference rules. 

• The rules for positive connectives and the ?-dereliction rule are restricted to strict se- 
quents. 

• The cut rule is omitted. 

We thus obtain the following inference rules: 

hr H?r,p h?r,Q 



r,T h?r,i 



^r,± h?r,p®Q 
h?r,Pi hr,N,M hr,N hr,M h?r,N 



h?r,P!eP 2 hr,N^M hr,N&M h?r,!N 
h ?r,p (?p g ?r) 



h ?r 

We call the resulting proof system LLP S ( r . 

Notice that a derivation of a strict sequent in LLP,^ may involve sequents which are 
not strict. For instance, consider: 



h ?f,T 

i-?r,T,± 
h ?r,T^± 



The following property can be easily verified by taking into account the invertibility of 
negative rules and the focalization property of positive rules pQ. 

Lemma A.l. A strict sequent is provable in LLP if and only if it is provable in LLP S ^. □ 

Strict sequents will play a crucial role for the correspondence between LLP and the proof 
system for ludics (Theorem IA.4j) . The intuition, which we will formalize later, is that a 
strict sequent h ?Pi, . . . , ?P n , D can be thought of as a sequent of the proof system of ludics 
(omitting the information about designs) of the form h Pi, . . . , P n , D. 

On the other hand, strict derivations serve as intermediate step to define synthetic 
connectives and the proof system LLP SJ/n we give in the next section. 

A. 3. Synthetic connectives. Any derivation of a strict sequent in LLP s j r can be decom- 
posed into subderivations of the following forms: 
(i) Positive subderivation: 

h?r,N n ••• h?r,N im 
h?r,p(N 1 ,...,N n ) 

that consists of positive inference rules only, where P(Ni, . . . , N n ) is a positive formula 
obtained from Ni, . . . , N n by applying positive connectives, and i\,...,i m € {!,..., n}. 
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For instance, if P(Ni, . . . , N n ) is of the form 1 (g) (!N (g) (!M © !L)), there are two positive 
subderivations with conclusion h ?l~, 1 © (!N © (!M © !L)): 

h?r,M h?r,L 



h?r,N h?r,!M h?r,N h?r,!L 



h?r,!N h?r,!M©!L h?r,!N h?r,!M©!L 

h?r,l h ?r,!N © (!M © !L) h ?r,l h?r,!N©(!Mffi!L) 
h?r,l©(!N©(!Mffi!L)) h?r,l©(!N© (!M © !L)) 

(ii) Negative subderivation: 

h?r,?P! ... h?r,?p fc 
h?r,N(Pi,...,p n ) 

that consists of negative inference rules only, where N(Pi, . . . , P n ) is a negative formula 
obtained from Pi, . . . , P n by applying negative connectives, and Pi, ... , consist of 
formulas in {Pi, . . . , P n }. For instance, if N(Pi, . . . , P n ) is of the form _L ^ (?P ^? 
(?Q & ?R))> then there is (essentially) one negative subderivation with conclusion 
h?r,J_ 5 ?(?P^(?Q&?R)): 

h?r,?p,?Q h?r,?p,?R 
h ?r,?p,?Q&?R 



h?r,?p ? ?(?Q&?R) 
h?r,±,?p ? ?(?Qfc"?R) 
h?r,j_2?(?p^(?Q&?R)) 

(hi) ?-dereliction: 

h ?r,p (?P G ?r) 
F?f 

Notice that the premises and conclusion of each subderivation are assumed to be strict 
sequents; one can easily check that it is always the case in any derivation of a strict sequent 
in LLP S ( r . 

The above decomposition motivates us to cluster the logical connectives of the same 
polarity into synthetic connectives (cf. |20j). Consider the expressions finitely generated 
by: 

p ::= | 1 | p (g> p j pffip \x, 
n ::= T j _L j n^n j n&n j 
where x ranges over the set of variables. 

We write var(p) (resp. var(n)) to denote the set of variables occurring in p (resp. n). p 
is a positive synthetic connective if for every subexpression of p of the form pi ® p2, var(pi) 
and var(p2) are disjoint. For instance, \x <g> (\y © \y) is a positive synthetic connective while 
!x©(!y©!y) is not. Likewise, n is a negative synthetic connective if for every subexpression 
of n of the form rq ^ ri2, var(rq) and var(ri2) are disjoint. This condition is needed when we 
translate synthetic connectives to logical connectives of ludics. 

We indicate the variables occurring in p by writing p = p(aq, . . . , x n ), and similarly for 
n. Given a negative synthetic connective n, its dual n d is obtained by replacing T with 0, 
_L with 1, 2? with ©, & with ©, and ? with ! respectively, in each occurrence of symbol. p d 
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is similarly denned. 

The formulas of LLP are then redefined inductively as follows: 

P ::= p(N 1 ,...,N n ), 
N ::= n(P 1 ,...,P n ) J 

where p(Ni, . . . , N n ) is obtained from p = p(xi, . . . , x n ) by substituting Nj for Xi (1 < i < n). 
Notice that when n = 0, P can be any combination of and 1 using <S> and ©. 

To each positive synthetic connective p(x±, . . . ,x n ), we can naturally associate a set 
of inference rules as follows. Consider all possible positive sub derivations with conclusion 
h ?T, p(Ni, . . . , N„) in the sense of (i) above. To each such derivation 

\-ir,H h ■■■ h?r,N im 
h?r,p(Ni,...,N n ) 

we associate an inference rule: 

h?r,N n ... h?r,N, m 
h?r,p(Ni,...,N n ) 

For instance, to p(x, y, z) = 1 ® (\x <g> (\y © \z)), we associate two inference rules: 

h?r,N h?r,M h?r,N h?r,L 

H?r,p(N,M,L) H?r,p(N,M,L) 

Likewise, each negative synthetic connective n(xi, . . . , x n ) comes equipped with a unique 
inference rule derived from the negative subderivation with conclusion h ?T, n(Pi, . . . , P„) 
(see (ii) above). For instance, n(x, y, z) = _L ^ (Ix ^ (?y & ?z)) is equipped with: 

h?r,?p,?Q h?r,?p,?R 

l-?r,n(P,Q,R) 

Observe the asymmetry between the positive and negative cases here; in the negative 
case, we leave the ?-formulas ?P,?Q,?R in the premises. These formulas are to be dealt 
with by the ?-dereliction rule. 

We thus consider proof system LLP s;/n that consists of three types of inference rules: 

h?r,N ix ... h?r,N^ m h?r,?Pi ... h?r,?p fc h?r,p (?Pe?r) 
h?r, P (N 1 ,...,N n ) h?r,n(Pi,...,p n ) h?r 

In view of the decomposition of LLP s j r derivations, we obviously have: 

Lemma A. 2. A strict sequent is provable in LLP s ^ r if and only if it is provable in LLP SJ/n . 

□ 

A. 4. Relating to the ludics proof system. Let us now move on to the proof system for 
ludics described in 13.11 We assume that the signature A is rich enough to interpret LLP: 

• A contains a miliary name * and a unary name f. 

• \i A contains an n-ary name a and an m-ary name 6, it also contains n-ary names 7i"ia, 
7T2a and an (n + m)-ary name apb (cf. Example 12. 14j) . 
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Given a negative synthetic connective n, we inductively associate a set n* of negative actions 
of ludics as follows: 

^ = 0, 

i-S = {*}, 

?x' = (t(x)}, 
(n^m)J = {apb(x,y) : a(x) G n',b(y) G m*}, 
(n & m)* = {vria(x) : a(x) G n*} U {7r 2 6(y) : b(y) G m'}. 

Notice that when a(x) G n*, the variables x occur in n. Hence apb(x,y) above is certainly 
a negative action, since x and y are disjoint sequences due to the definition of negative 
synthetic connective. We finally let n* = (z, n*), where z lists the variables occurring in n. 
A positive synthetic connective p is interpreted by p* = p d *. 

For instance, when p(x, y, z) = 1 <S> (lx <g> (\y © \z)) and n(x, y, z) = _L ^ (lx ^ (ly & ?z)), 
we have p* = n* = (x, y, z, n*) with 

"o = {*P(tp(Tit))(» > !/) 5 *p(tp(^2t))(^)}- 
This induces a polarity-preserving translation from the formulas of LLP to the logical 
behaviours of ludics: 

n(P 1 ,...,P n )' := n'(P;,...,P'), 
p(N 1 ,...,N„)' := ^N;,...,^). 

To establish a connection with LLP, we simplify the proof system of 13.11 by taking its 
skeleton, namely by omitting all information about designs. The resulting proof system, 
which we call L, consists of two sorts of inference rules: 

hT,N h ... hT,N lm (a(Nx, . . . , N n ) G T) i> r, P n , . . . , P im } a(df ) eao 

FT (°> a ) hr,a(p ll ...,p n ) (a) 

where a = (z, ao), z = z\, . . . , z n , a(x) G ao and the indices i±, . . . , i m G {1, . . . , n} are 
determined by the variables x = z^ , . . . , z,- lm . 

For instance, when p(x, y, z) = 1 ® (\x <g> (\y © \z)) and n(x, y, z) = _L (lx (ly & ?z)), 
we have the following inference rules for p* and n*: 

ht,n hr,M (p J (N,M,L>Gr) hr,N hr,L (p^N, m, l) g r) 
FT FT 
hr,p,Q hr,p,R 

hr,n'(P,Q,R) 

It is now straightforward to verify: 

Lemma A. 3. A strict sequent h D is derivable in LLP S2/n if and only if h T", D* is 
derivable in L. □ 

We therefore obtain: 

Theorem A. 4. ^4 strict sequent h D is derivable in LLP i/ and on!?/ i/ h I - *, D* is 
derivable in~L. □ 
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One can annotate derivations in L with designs as in Section I3.ll Therefore the above 
theorem means that ludics designs can be used as term syntax for LLP, as far as strict 
sequents and derivations are concerned (although we have to verify carefully that the trans- 
lation preserves the reduction relation). 

A. 5. From ludics to LLP. It is also possible to give a converse translation from the logical 
behaviours of ludics to the formulas of LLP. To do so, we proceed as follows (c/. Example 
ETOJ: 

• to each action a(x\, . . . , x m ), we associate the synthetic connective a(x±, . . . , x m )° := 
l Xl ^ ■ ■ ■ 3? lx m (a()° := 1, if a is nullary); 

• to each logical connective a = (z, {ai(xi), . . . , afc(xfc)}), we associate the synthetic con- 
nective a° := ai(xi)° & • • • & ak{xk)° {o/° '■= T, if k = 0); 

• to each logical behaviour, we associate the formula of LLP 

a(Pi J ...,P n )° := a°(P?,...,P°), 
3(Ni N B )° := a° d (N?,...,N°); 

• to each positive context T = Pi,... ,P n of system L, we associate the multiset T° := 
?P°, . . . , ?P° of formulas of LLP; 

• to each negative context T, N of system L, we associate the multiset of formulas (T, N)° := 

r°,N°. 

It is routine to define an isomorphism between D and D*° (resp. between D and D°*) in 
some natural sense. Moreover, the translation of a sequent of system L always results in a 
strict sequent of LLP . We therefore conclude by Theorem IA.41 

Theorem A. 5. A sequent h A is derivable in proof system L if and only i/h A is derivable 
in LLP. □ 
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